cve/2007/CVE-2007-0949.md

CVE-2007-0949

Description

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.

POC

Reference

• https://www.exploit-db.com/exploits/5032
• https://www.exploit-db.com/exploits/5077

Github

No PoCs found on GitHub currently.